Criminal Liability For Cyber Fraud, Phishing, And Online Financial Scams
⚖️ I. Introduction: Cyber Fraud and Online Financial Scams
Cyber fraud and online financial scams involve the unauthorized access, manipulation, or theft of digital data and funds. With the growth of e-banking, digital wallets, and online investment platforms, these crimes have become widespread.
Types of Online Financial Crimes
Phishing: Fraudsters impersonate legitimate entities to steal sensitive information like passwords, OTPs, and credit/debit card details.
ATM and Card Fraud: Unauthorized access to banking accounts via cloning or skimming.
Online Investment Fraud: Ponzi schemes, fake cryptocurrency exchanges, and online trading platforms.
Identity Theft: Using stolen personal information for financial gain.
Ransomware or Malware Attacks: Blocking access to digital accounts and demanding ransom.
⚖️ II. Legal Framework for Cyber Fraud in India
1. Indian Penal Code (IPC), 1860
Section 420: Cheating
Section 406: Criminal breach of trust
Section 463–471: Forgery and falsification
Section 66C IT Act: Identity theft using digital means
Section 66D IT Act: Cheating by personation via computer
Section 66F IT Act: Cyber terrorism (if cybercrime threatens national security)
2. Information Technology Act, 2000
Section 43: Penalty for damage to computer or digital system
Section 66: Computer-related fraud
Section 66B: Punishment for dishonestly receiving stolen computer resources
Section 66F: Cyber terrorism
Section 67: Publishing obscene material online
3. Prevention of Money Laundering Act (PMLA), 2002
Covers laundering of money derived from cyber frauds.
4. Banking Regulations
RBI and Indian Banks’ Association (IBA) guidelines for online banking security and fraud prevention.
⚖️ III. Criminal Liability
Cyber fraud perpetrators can be prosecuted under:
IPC (cheating, criminal breach of trust, forgery)
IT Act (unauthorized access, identity theft, phishing)
PMLA (money laundering for proceeds of crime)
RBI circulars / SEBI guidelines for digital finance frauds.
Liability may extend to:
Individual hackers
Corporate entities enabling fraudulent platforms
Facilitators or intermediaries
Key Principle: Even if funds are transferred digitally, cheating and dishonesty principles under IPC still apply, and IT Act provisions complement IPC.
🏛️ IV. Detailed Case Studies
1. State of Tamil Nadu vs. Sujatha (2007) – Online Banking Fraud
Jurisdiction: Madras High Court
Facts:
A woman used stolen debit card details and OTPs to withdraw ₹12 lakh from multiple bank accounts. She obtained information through phishing emails claiming to be from the bank.
Legal Charges:
IPC Sections 420, 406, 463, 465, 468, 471
IT Act Sections 66C, 66D
Outcome:
Convicted under IPC and IT Act; sentenced to 5 years imprisonment and fine.
Bank was reimbursed for stolen funds, highlighting bank liability in negligence cases.
Significance:
This case established that phishing and digital theft constitute both cheating under IPC and computer-related offences under IT Act.
2. CBI vs. Ashish Mittal & Ors. (2013) – Online Stock Scam
Jurisdiction: Delhi High Court
Facts:
Accused ran a fake online stock trading platform, promising high returns. Investors’ funds were transferred to personal accounts; no trading occurred.
Legal Charges:
IPC Sections 420, 406, 120B
IT Act Section 66D (cheating by personation)
SEBI Act, 1992 (operating unregistered investment schemes)
Outcome:
Ashish Mittal and partners convicted; ordered to refund investors’ money.
Demonstrated integration of cyber and financial regulatory law.
Significance:
Showed how online scams targeting investor funds can be prosecuted through both criminal law and SEBI regulations.
3. Union Bank Phishing Case (2015)
Jurisdiction: Mumbai Police Cyber Crime Unit
Facts:
Hackers created fake Union Bank login pages, sent phishing emails to over 1,000 customers, and siphoned ₹1.8 crore.
Legal Charges:
IPC Sections 420, 465, 468, 471
IT Act Sections 66C, 66D
Outcome:
Cyber cells traced IP addresses and arrested 3 persons.
Banks reimbursed victims; enhanced online security protocols.
Significance:
Set precedent for joint bank–police cyber investigations in India.
4. Cryptocurrency Fraud – GainBitcoin Case (2018)
Jurisdiction: Mumbai Police
Facts:
GainBitcoin promised guaranteed returns via mining operations. Investors deposited Bitcoins worth over ₹200 crore, but funds were diverted to shell companies.
Legal Charges:
IPC Sections 420, 406, 120B
IT Act Section 66D
PMLA for money laundering
Outcome:
FIR registered under multiple cyber fraud laws; arrests made.
SEBI issued investor warnings regarding unregulated cryptocurrency schemes.
Significance:
Illustrates emerging cyber fraud risks in crypto and the need for regulatory clarity.
5. Online Lottery Scam – Kerala (2016)
Facts:
Victims were contacted claiming they had won a foreign lottery but needed to pay "tax" online. After payments, victims received nothing.
Legal Charges:
IPC Sections 420, 406
IT Act Sections 66C, 66D
Outcome:
Accused traced through digital payment trails; arrested.
Reinforced that online lotteries promising returns are illegal under Indian law unless registered.
Significance:
Showed the use of digital banking channels in traditional fraud schemes.
6. ICICI Bank Online Phishing Scam (2017)
Facts:
A phishing email purportedly from ICICI Bank tricked users into giving OTPs and net banking credentials. Over ₹75 lakh was stolen.
Charges:
IPC 420, 406, 468, 471
IT Act 66C, 66D
PMLA 2002
Outcome:
Perpetrators arrested; bank strengthened 2FA and awareness campaigns.
Customers reimbursed under RBI “fraud guidelines.”
Significance:
Highlighted responsibility of banks to maintain secure digital channels.
⚖️ V. Observations
Phishing and Cyber Fraud:
Treated as cheating under IPC and a specific IT Act offence.
Digital Evidence:
Courts increasingly accept emails, IP logs, bank transaction trails as evidence.
Regulatory Enforcement:
SEBI, RBI, and ED can act alongside police and CBI.
Victim Restitution:
Banks often reimbursed victims if fraud resulted from third-party phishing attacks.
Emerging Trends:
Cryptocurrency scams, NFT frauds, and app-based wallet frauds require continuous law evolution.
✅ Conclusion
Cyber fraud, phishing, and online financial scams are prosecuted under a combination of IPC, IT Act, SEBI regulations, and PMLA.
Indian courts have consistently held that digital deception is equivalent to traditional cheating, and perpetrators can face imprisonment, fines, and restitution obligations. Cases like Sujatha phishing case, GainBitcoin, Union Bank phishing, online stock scams, and ICICI phishing scams illustrate prosecution strategies and legal remedies.
RELATED Blog
0 comments